US20100192230A1 - Protecting transactions - Google Patents

Protecting transactions Download PDF

Info

Publication number
US20100192230A1
US20100192230A1 US12/359,215 US35921509A US2010192230A1 US 20100192230 A1 US20100192230 A1 US 20100192230A1 US 35921509 A US35921509 A US 35921509A US 2010192230 A1 US2010192230 A1 US 2010192230A1
Authority
US
United States
Prior art keywords
transaction
computing device
user
processor
method
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
US12/359,215
Other versions
US9065812B2 (en
Inventor
David J. Steeves
Kim Cameron
Todd L. Carpenter
David Foster
Quentin S. Miller
Gregory D. Hartrell
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Microsoft Technology Licensing LLC
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Priority to US12/359,215 priority Critical patent/US9065812B2/en
Assigned to MICROSOFT CORPORATION reassignment MICROSOFT CORPORATION ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: HARTRELL, GREGORY D., MILLER, QUENTIN S., CARPENTER, TODD L., FOSTER, DAVID, STEEVES, DAVID J., CAMERON, KIM
Publication of US20100192230A1 publication Critical patent/US20100192230A1/en
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC reassignment MICROSOFT TECHNOLOGY LICENSING, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: MICROSOFT CORPORATION
Application granted granted Critical
Publication of US9065812B2 publication Critical patent/US9065812B2/en
Application status is Active legal-status Critical
Adjusted expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06QDATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/02Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G06Q20/027Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] involving a payment switch or gateway
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/74Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06QDATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/102Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce

Abstract

Technology is described for protecting transactions. The technology may include a switching component that a user can employ to switch an associated mobile device into a secure mode so that a user can confirm the transaction. After initiating a transaction request, the user can confirm the transaction request by activating the switching component, which can cause the mobile device to switch into a secure mode. In the secure mode, the mobile device may prevent the mobile device from conducting various normal activities, such as executing applications, receiving input, providing output, and so forth. The switching component may disable other processing temporarily. Upon receiving the confirmation from the user, the switching component may send a confirmation communication to complete the transaction.

Description

    BACKGROUND
  • Mobile phones are now sophisticated mobile computing systems. They can include multiple processors, memory, and various input/output devices. Mobile phones can have operating systems and can execute multiple applications, sometimes even concurrently. For example, “smart phones” are mobile phones that employ operating systems and applications designed by the assignee of the instant patent application.
  • Users can employ mobile phones to complete simple and complex tasks, including completing various online transactions. For example, mobile phones can be used to complete banking or other transactions. A user can employ a mobile phone to connect to a bank's computer (e.g., by using a browser on the mobile phone to connect to an Internet service offered by the bank) to transfer funds between accounts, pay bills, etc.
  • Smart phones may eventually even become electronic “wallets” that users use to authorize payments to vendors, such as by placing their phone proximate to a “reader” at a vendor's establishment. Upon purchasing an item, the user may place the mobile phone near the reader. The reader may read a signal from the mobile phone to authorize the transaction, such as by confirming an identifier in the mobile phone with a bank.
  • As the set of features a phone offers increases, so does its “attack surface.” An attack surface comprises the set of points that a malicious entity can employ to break into any security features that a mobile phone, its operating system, or applications provide. Examples of some of the points comprising an attack surface include application program interfaces (APIs) provided by the operating system or an application. A malicious entity can install a component such as an application, object, dynamic link library, or other component to intercede when an online transaction occurs, such as to surreptitiously record and re-transmit credit card numbers, authorize transactions without the user's awareness, and so forth. To do so, the component can interject input or output, such as by employing the operating system's API to detect and/or interject keystrokes.
  • SUMMARY
  • Technology is described for protecting transactions. A transaction can include any sort of request, such as an operating system request, financial request, or other request. The request can be initiated by a user or a component. A transaction can be initiated remotely, such as at a mobile phone, but completed elsewhere, such as at a server. The technology may include a switching component that a user can use—or that can be automatically signaled—to switch an associated mobile device into a secure mode so that a user can confirm the transaction. When the user activates the switching component, the mobile device switches into a secure mode. In the secure mode, the mobile device may disable processors from conducting various normal activities, such as executing applications, receiving input, providing output, and so forth. Upon receiving the confirmation from the user, the switching component may send a confirmation communication to complete the transaction, and may then re-enable disabled activities.
  • This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 is a block diagram illustrating components employed by the technology in various embodiments.
  • FIGS. 2A-2B are block diagrams illustrating components employed by the technology in various embodiments.
  • FIG. 3 is a flow diagram illustrating a method invoked by the technology in various embodiments to receive challenge messages.
  • FIG. 4 is a block diagram illustrating a user interface provided by the technology in some embodiments.
  • FIG. 5 is a flow diagram illustrating a method invoked by the technology in various embodiments to prompt users.
  • FIG. 6 is a block diagram illustrating components employed by the technology in various embodiments.
  • FIG. 7 is a flow diagram illustrating a method invoked by the technology in various embodiments to handle transactions.
  • FIG. 8 is a block diagram illustrating components employed by the technology in various embodiments.
  • DETAILED DESCRIPTION
  • Technology is described for protecting transactions, such as transactions at mobile phones. A transaction can include any sort of request, such as an operating system request, financial request, or other request. The request can be initiated by a user or a component, such as an application, service, etc. A transaction can be initiated remotely, such as at a mobile phone, but completed elsewhere, such as at a server. In various embodiments, the technology includes a switching component. A user can employ the switch to confirm a transaction using a reduced attack surface. As an example, when a transaction is to be confirmed, the user can employ the switch to cause the computing device (e.g., mobile phone) into a mode that employs one of its processors that may have a smaller attack surface than its other processors. When the switching component is activated, it may disable all processors other than one of the processors (“secure processor”) from accessing input or output devices. The other processors may, however, continue other execution. The secure processor may be a processor with a smaller attack surface than the other processors that are disabled. The secure processor may be similar to the other, now disabled, processors in other respects.
  • In various embodiments, the user may receive a signal that the switching component should be activated. The signal may be any sort of output of the computing device, such as a visual, auditory, or tactile signal. As examples, the computing device may display a message, illuminate a lamp, emit a sound, cause a vibration, etc. In various embodiments, the user may activate the switching component after requesting a transaction even though the computing device has not provided a signal.
  • In various embodiments, the switch can be automatically signaled to switch an associated mobile device into a secure mode so that a user can confirm the transaction. As an example, when a user initiates a transaction from a mobile device to a server, the server can send a communication (“challenge”) that is detected by the switching component. Upon detecting the communication, the switching component can cause the mobile device to switch into a secure mode.
  • When the user activates the switch, the computing device can be switched to a secure mode. In the secure mode, the switching component may disable the mobile device from conducting various normal activities, such as executing applications, receiving input, providing output, and so forth. To do so, the switching component may provide a visual signal to the user (e.g., via a display or light, speaker, vibration, etc.) that a confirmation is required and may also disable all other processing temporarily, such as by “switching off” processors that are not secured. In various embodiments, the processors that are “switched off” may be able to perform all computations other than receive input from input devices or provide output to output devices. For example, the switching component may temporarily disable a main processor and employ only a secure processor to receive a confirmation from the user.
  • The confirmation expected from the user may be a specific user input, such as depressing a switch or button, entering a password, etc. Upon receiving the confirmation from the user, the switching component may send a confirmation communication (e.g., response to the challenge) and then re-enable disabled activities. The switching component (or some other validating component) may send a confirmation communication to the component that sent the challenge.
  • The secure processor can be a processor with limited capability that the operating system of the mobile device generally does not employ to execute applications. The confirmation communication may be a message that contains a digital signature, an encrypted code or password, or other secure confirmation that cannot be easily duplicated. The server may await the confirmation communication from the mobile device before completing the transaction.
  • Several embodiments of the facility are described in more detail in reference to the Figures. The computing devices on which the described technology may be implemented may include one or more central processing units, memory, input devices (e.g., keyboard and pointing devices), output devices (e.g., display devices), storage devices (e.g., disk drives), and network devices (e.g., network interfaces). The memory and storage devices are computer-readable media that may store instructions that implement the importance system. In addition, the data structures and message structures may be stored or transmitted via a data transmission medium, such as a signal on a communications link. Various communications links may be used, such as the Internet, a local area network, a wide area network, or a point-to-point dial-up connection.
  • FIG. 1 is a block diagram illustrating components employed by the technology in various embodiments. The environment 100 in which the technology operates can include one or more servers 102 a through 102 n, a network 104 (e.g., an intranet or the Internet), and one or more computing devices, such as mobile computing devices 106 a through 106 m. Other varieties of computing devices can also be employed. The mobile computing devices may be handheld devices, such as mobile telephones. The mobile computing devices may wirelessly communicate with other devices, such as to communicate voice, video, or other information, via an antenna 108. The antenna 108 can exchange radiofrequency or other signals with a corresponding antenna (not shown) associated with the mobile computing devices.
  • FIG. 2A is a block diagram illustrating components employed by the technology in various embodiments. The components of a computing device, such as mobile device 106 a, can include one or more processors, such as processors 202 and 204. A first processor 202 can be a processor that the mobile device employs to execute its operating system 212, application 214, or other routines. For example, the first processor can be a conventional reduced instruction set processor. A second processor 204 can be a secure processor that has a minimal attack surface. For example, the second secure processor can be a processor that is employed for the limited purpose of authenticating or verifying transactions. An example of such a processor is a processor that is embedded in some subscriber identification module (“SIM”) cards that mobile phones can employ. The first and second processor may exchange data, such as via a shared memory 222. For example, the first processor can store data from a challenge it receives from a server in the shared memory so that when the user switches the mobile device into a secure mode, the second processor can retrieve the data from the secure memory without requiring the first processor to execute any instructions. In various embodiments, the first and second processor may be highly similar or even identical, but one may be more secure than the other because it uses a different operating system, may have reduced input/output connections, etc.
  • The mobile device may have a radio input/output component 210 that it can employ to send and/or receive radio signals. As an example, the mobile device may receive challenge messages via the radio input on a different frequency (or using a different radio communications mechanism) than the frequency or radio communications mechanism that the mobile device employed to request a transaction. The computing device may include an encryption component 218 that it employs to encrypt communications, such as responses to challenges. The computing device can also include a display 206 (e.g., lights and/or display panels), biometric input component 208, operating system 212, digital signature certificate 216, and lamp 220. The biometric input component 208 can receive and/or interpret input based on fingerprint, retina scan, camera-based facial recognition, touch and/or pressure sensors, heat sensors, accelerometers, and so forth. The digital signature certificate 216 can create and/or store digital signatures. The lamp 220 can indicate that the user needs to respond to a challenge to authorize a transaction.
  • FIG. 2B is a block diagram illustrating components employed by the technology in various embodiments. The components are similar to the components described above in relation to FIG. 2A, except that the computing device can include a processor 224 that has a hypervisor 226. A hypervisor is a component that enables a processor to offer multiple processing capabilities. As an example, the processor may offer multiple “virtual machines” that each can execute its own operating system. The processor 224 is illustrated as executing virtual machine 1 228 a through virtual machine n 228 n. When the switching component is activated, it may cause the processor 224 to switch to a virtual machine that reduces (e.g., minimizes) the attack surface.
  • FIG. 3 is a flow diagram illustrating a method invoked by the technology in various embodiments to receive challenge messages. The routine 300 may be invoked by a mobile device when it receives a challenge. The routine 300 begins at block 302. At block 304, the routine receives a challenge, such as a communication sent by a server in response to a request for a transaction. At block 306, the routine stores data from the receive challenge in a shared memory. As an example, the routine may store a subset of the data that is contained in the challenge communication that another routine of the mobile device can employ to determine that a user needs to confirm the transaction. (Herein in relation to transactions, confirm, authorize, verify, and the like are employed as synonyms.) At block 308, the routine invokes a prompt_user subroutine to prompt the user to confirm the transaction. The prompt_user subroutine is described in further detail below in relation to FIG. 5. At block 310, the routine returns.
  • Those skilled in the art will appreciate that the logic illustrated in FIG. 3 and described above, and in each of the flow diagrams discussed below, may be altered in a variety of ways. For example, the order of the logic may be rearranged, substeps may be performed in parallel, illustrated logic may be omitted, other logic may be included, etc.
  • FIG. 4 is a block diagram illustrating a user interface provided by the technology in some embodiments. A computing device, such as a mobile device 400, can include a display 402, buttons 404 a, 404 b, and 404 c, and indicators or lamps 406 a and 406 b. The mobile device may indicate to the user via a lamp 406 a that the user needs to confirm the transaction. The mobile device may also display a message 408 in the display 402 to prompt the user to confirm the transaction. The user may then confirm the transaction by depressing a key 404 a.
  • FIG. 5 is a flow diagram illustrating a method invoked by the technology in various embodiments to prompt users. A mobile device may invoke the routine 500 to prompt a user to confirm the transaction. The routine 500 begins at block 502. At block 504, the routine may display a prompt, such as in a display. Alternatively, or in addition, the routine may indicate that the transaction needs to be confirmed by illuminating a lamp. At decision block 506, the routine determines whether a verification switch is active. The routine may wait for a specified threshold period of time before determining that the verification switch is not active (not illustrated). If the verification switch is not active after the specified period of time, the routine continues at block 514, where it returns. Otherwise, the routine continues at block 508. At block 508, the routine receives a response from the user. As an example, the routine may receive an indication that the transaction is to be authorized. The indication can be an entry of a password, depression of a key, etc. In various embodiments, the server that requests the confirmation may indicate in the challenge what confirmation will be acceptable. As an example, a financial transaction may require a confirmation including a password whereas another transaction may require only depression of a key. At decision block 510, the routine determines whether the response received from the user is correct or acceptable by the server. If the response is correct or acceptable, the routine continues at block 512, where it transmits an indication of the response to the server. Otherwise, the routine may display an error at block 516. The routine then returns at block 514.
  • FIG. 6 is a block diagram illustrating components employed by the technology in various embodiments. A computing device can include a bus 602 to which one or more processors and a memory are connected. For example, the bus 602 can be connected to a first processor 604 and a second, secure processor 608. A shared memory 610 can also be connected to the bus. When a switch 606 is open, the first processor is disconnected from the other components, such as the second processor and the shared memory. The switch may initially be closed. When the computing device receives a challenge, it may suspend the first processor and open the switch. The switch may remain open until the user confirms or rejects the transaction. Thereafter the switch closes and the first processor is again operational.
  • FIG. 7 is a flow diagram illustrating a method invoked by the technology in various embodiments to handle transactions. A server may invoke the routine 700 to handle a transaction, such as upon receiving a transaction request. The routine 700 begins at block 702. At block 704, the routine receives a request, such as the transaction request. At block 706, the routine determines a level of verification required for the transaction. At block 708, the routine assembles a challenge. The challenge can be communication that the server transmits to the client computing device (e.g., mobile device) in response to the received transaction request. The communication can include information that the client computing device can employ in preparing a response to the challenge. As an example, the challenge can include a key that the client computing device can transform into an acceptable response to the challenge. At block 710, the routine transmits the challenge to the computing device that requested the transaction. It may then wait for a response. At block 712, the routine receives a response to the challenge. At block 714, the routine verifies the received response. As an example, the routine may verify that the response contains the correct transformation of the key, encrypted information, digitally signed information, etc. At decision block 716, the routine verifies the challenge. If the challenge is verified, the routine continues at block 718. Otherwise, the routine continues at block 720 where it returns an error. At block 718, the routine handles the transaction. The routine returns at block 722.
  • FIG. 8 is a block diagram illustrating components employed by the technology in various embodiments. A computing device (e.g., a mobile device) can employ switching components to selectively disable displays, other output devices, input devices, storage, and so forth. For example, a switching component 804 can prevent a display signal 802 from reaching a display output 806. A switching component 812 can prevent an input device 810 from transmitting input signals (e.g., keyboard, stylus, etc.) to an input processor 814. These switching components can work with switching component 606 of FIG. 6.
  • Various embodiments of the technology will now be described. The embodiments may operate independently or jointly.
  • The technology can invoke a method for protecting a remotely initiated transaction, wherein the method comprises initiating a transaction by sending a request from a client computing device to a server computing device; receiving a communication from the server computing device, the communication indicating a challenge; causing the client computing device to disable an unsecure processor so that a secure processor can verify the remotely initiated transaction with a user; indicating the challenge to the user; receiving a confirmation from the user; and transmitting a confirmation message to the server computing device so that the server computing device can complete the transaction. The challenge can include an indication that a secure computing environment should confirm the challenge. The indication can include an indication of a required level of security. The method can include disabling an input device of the client computing device. The method can include disabling an output device of the client computing device. The method can include disabling execution of an application executing on the client computing device. The method can include disabling execution of all applications executing on the client computing device. The method can include sending a signal to the unsecure processor that it is to be temporarily disabled. The method can include storing by the unsecure processor a portion of the received communication in a shared memory. The secure processor can read the portion of the received communication in the shared memory and generate a signal (e.g., encrypted confirmation or transformed key) based on the read portion of the received communication. The method can then transmit the confirmation message.
  • The technology can include one or more computer-readable media collectively storing computer-readable instructions that, when executed, perform a method for protecting a remotely initiated transaction, the method comprising: receiving a communication from the server computing device, the communication indicating a challenge; causing the client computing device to disable a processor so that a secure processor can verify the remotely initiated transaction with a user; indicating the challenge to the user; receiving input from the user; and if the input is a confirmation, transmitting a confirmation message to the server computing device so that the server computing device can complete the transaction. The method can display a prompt to the user to confirm the remotely initiated transaction. The method may open a switch upon receiving the communication. The method may then close the switch upon receiving the input from the user.
  • The technology can include a system for protecting a remotely initiated transaction, comprising: a component configured to initiate a transaction by transmitting a request from a client computing device to a server computing device; a component configured to receive a communication from the server computing device, the communication indicating a challenge; and a component configured to cause the client computing device to disable a processor so that a secure processor can verify the remotely initiated transaction with a user. The system can include a component configured to indicate the challenge to the user. The system can include a component configured to receive input from the user and, if the input is a confirmation, transmit a confirmation message to the server computing device so that the server computing device can complete the transaction. The system can include a bus to which the processor and the secure processor are both connected; a shared memory connected to the bus; and wherein the component configured to cause the client computing device to disable the processor is a switch.
  • The technology can include one or more computer-readable media storing computer-readable instructions that, when executed, perform a method for protecting a transaction, the method comprising: receiving a signal to employ a secure processor; causing the client computing device to disable a processor so that the secure processor can verify a transaction; receiving input from the user; and if the input is a confirmation, communicating a confirmation message. The method can display a prompt to the user to confirm the transaction. The method can open a switch prior to receiving the signal and/or close the switch upon receiving the input from the user.
  • The technology can include a system for protecting a transaction, comprising: a component configured to initiate a transaction by transmitting a request from a client computing device to a service; a component configured to receive a communication from the service, the communication indicating a challenge; and a component configured to cause the client computing device to disable a processor so that a secure processor can verify the remotely initiated transaction with a user. The system can include a component configured to indicate the challenge to the user. The system can include a component configured to receive input from the user and, if the input is a confirmation, transmit a confirmation message to the service so that the service can complete the transaction. The system can include a bus to which the processor and the secure processor are both connected; a shared memory connected to the bus; and wherein the component configured to cause the client computing device to disable the processor is a switch.
  • The technology can thus be used in various embodiments to confirm transactions generated locally at the computing device for transactions to be completed locally or remotely.
  • Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims. Accordingly, the invention is not limited except as by the appended claims.

Claims (20)

1. A method performed by a computing system for protecting a remotely initiated transaction, comprising:
initiating a transaction by sending a request from a client computing device to a server computing device;
receiving a communication from the server computing device, the communication indicating a challenge;
causing the client computing device to disable an unsecure processor so that a secure processor can verify the remotely initiated transaction with a user;
indicating the challenge to the user;
receiving a confirmation from the user; and
transmitting a confirmation message to the server computing device so that the server computing device can complete the transaction.
2. The method of claim 1 wherein the challenge includes an indication that a secure computing environment should confirm the challenge.
3. The method of claim 2 wherein the indication includes an indication of a required level of security.
4. The method of claim 1 further comprising disabling an input device of the client computing device.
5. The method of claim 1 further comprising disabling an output device of the client computing device.
6. The method of claim 1 further comprising disabling execution of an application executing on the client computing device.
7. The method of claim 1 further comprising disabling execution of all applications executing on the client computing device.
8. The method of claim 1 further comprising sending a signal to the unsecure processor that it is to be temporarily disabled.
9. The method of claim 1 further comprising storing by the unsecure processor a portion of the received communication in a shared memory.
10. The method of claim 9 further comprising reading by the secure processor the portion of the received communication in the shared memory.
11. The method of claim 10 further comprising generating by the secure processor a signal based on the read portion of the received communication.
12. The method of claim 11 further comprising including the generated signal in the transmitted confirmation message.
13. A computer-readable medium storing computer-readable instructions that, when executed, perform a method for protecting a transaction, the method comprising:
receiving a signal to employ a secure processor;
causing the client computing device to disable a processor so that the secure processor can verify a transaction;
receiving input from the user; and
if the input is a confirmation, communicating a confirmation message.
14. The computer-readable medium of claim 13 further comprising displaying a prompt to the user to confirm the transaction.
15. The computer-readable medium of claim 14 further comprising opening a switch prior to receiving the signal.
16. The computer-readable medium of claim 15 further comprising closing the switch upon receiving the input from the user.
17. A system for protecting a transaction, comprising:
a component configured to initiate a transaction by transmitting a request from a client computing device to a service;
a component configured to receive a communication from the service, the communication indicating a challenge; and
a component configured to cause the client computing device to disable a processor so that a secure processor can verify the remotely initiated transaction with a user.
18. The system of claim 17 further comprising a component configured to indicate the challenge to the user.
19. The system of claim 18 further comprising a component configured to receive input from the user and, if the input is a confirmation, transmit a confirmation message to the service so that the service can complete the transaction.
20. The system of claim 17 further comprising:
a bus to which the processor and the secure processor are both connected;
a shared memory connected to the bus; and
wherein the component configured to cause the client computing device to disable the processor is a switch.
US12/359,215 2009-01-23 2009-01-23 Protecting transactions Active 2032-07-13 US9065812B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US12/359,215 US9065812B2 (en) 2009-01-23 2009-01-23 Protecting transactions

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US12/359,215 US9065812B2 (en) 2009-01-23 2009-01-23 Protecting transactions
US14/730,081 US9904912B2 (en) 2009-01-23 2015-06-03 Protecting transactions

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14/730,081 Continuation US9904912B2 (en) 2009-01-23 2015-06-03 Protecting transactions

Publications (2)

Publication Number Publication Date
US20100192230A1 true US20100192230A1 (en) 2010-07-29
US9065812B2 US9065812B2 (en) 2015-06-23

Family

ID=42355267

Family Applications (2)

Application Number Title Priority Date Filing Date
US12/359,215 Active 2032-07-13 US9065812B2 (en) 2009-01-23 2009-01-23 Protecting transactions
US14/730,081 Active 2029-09-20 US9904912B2 (en) 2009-01-23 2015-06-03 Protecting transactions

Family Applications After (1)

Application Number Title Priority Date Filing Date
US14/730,081 Active 2029-09-20 US9904912B2 (en) 2009-01-23 2015-06-03 Protecting transactions

Country Status (1)

Country Link
US (2) US9065812B2 (en)

Cited By (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1783654A1 (en) * 2004-07-27 2007-05-09 Sony Corporation Information processing device and method, recording medium, and program
US20110238514A1 (en) * 2010-03-23 2011-09-29 Harsha Ramalingam Transaction Completion Based on Geolocation Arrival
US20110238476A1 (en) * 2010-03-23 2011-09-29 Michael Carr Location-based Coupons and Mobile Devices
EP2629234A3 (en) * 2012-02-14 2013-10-02 Janus Technologies, Inc. Security-enhanced computer systems and methods
US20130275306A1 (en) * 2012-04-13 2013-10-17 Sergey Ignatchenko Apparatuses, methods and systems for computer-based secure transactions
WO2013153441A1 (en) * 2012-04-13 2013-10-17 Ologn Technologies Ag Secure zone for digital communications
WO2014057123A1 (en) * 2012-10-12 2014-04-17 Universitetet I Oslo Multi-mode computer with selector
US20140281560A1 (en) * 2013-03-15 2014-09-18 Ologn Technologies Ag Secure zone on a virtual machine for digital communications
US20140282543A1 (en) * 2013-03-15 2014-09-18 Ologn Technologies Ag Secure zone on a virutal machine for digital communications
US20150033301A1 (en) * 2012-03-02 2015-01-29 Alcatel Lucent Decentralized electronic transfer system
US9076003B2 (en) 2013-08-20 2015-07-07 Janus Technologies, Inc. Method and apparatus for transparently encrypting and decrypting computer interface data
US20150199554A1 (en) * 2014-01-15 2015-07-16 Motorola Mobility Llc Finger Print State Integration with Non-Application Processor Functions for Power Savings in an Electronic Device
US9215250B2 (en) 2013-08-20 2015-12-15 Janus Technologies, Inc. System and method for remotely managing security and configuration of compute devices
US9232176B2 (en) 2013-03-04 2016-01-05 Janus Technologies, Inc. Method and apparatus for securing computer video and audio subsystems
US9231921B2 (en) 2013-08-20 2016-01-05 Janus Technologies, Inc. System and architecture for secure computer devices
US9384150B2 (en) 2013-08-20 2016-07-05 Janus Technologies, Inc. Method and apparatus for performing transparent mass storage backups and snapshots
US9424443B2 (en) 2013-08-20 2016-08-23 Janus Technologies, Inc. Method and apparatus for securing computer mass storage data
US9432348B2 (en) 2012-04-20 2016-08-30 Ologn Technologies Ag Secure zone for secure purchases
US9565168B1 (en) * 2015-05-05 2017-02-07 Sprint Communications Company L.P. System and method of a trusted computing operation mode
US9578664B1 (en) 2013-02-07 2017-02-21 Sprint Communications Company L.P. Trusted signaling in 3GPP interfaces in a network function virtualization wireless communication system
US9634995B2 (en) 2010-12-22 2017-04-25 Mat Patents Ltd. System and method for routing-based internet security
US9684805B2 (en) 2013-08-20 2017-06-20 Janus Technologies, Inc. Method and apparatus for securing computer interfaces
US9686240B1 (en) 2015-07-07 2017-06-20 Sprint Communications Company L.P. IPv6 to IPv4 data packet migration in a trusted security zone
US9749294B1 (en) 2015-09-08 2017-08-29 Sprint Communications Company L.P. System and method of establishing trusted operability between networks in a network functions virtualization environment
US9781016B1 (en) 2015-11-02 2017-10-03 Sprint Communications Company L.P. Dynamic addition of network function services
US9811686B1 (en) 2015-10-09 2017-11-07 Sprint Communications Company L.P. Support systems interactions with virtual network functions in a trusted security zone
US9948640B2 (en) * 2013-08-02 2018-04-17 Ologn Technologies Ag Secure server on a system with virtual machines
US9965768B1 (en) 2011-05-19 2018-05-08 Amazon Technologies, Inc. Location-based mobile advertising
US10250498B1 (en) 2016-10-03 2019-04-02 Sprint Communications Company L.P. Session aggregator brokering of data stream communication
US10270776B2 (en) 2016-08-25 2019-04-23 Ologn Technologies Ag Secure zone for secure transactions

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10142836B2 (en) * 2000-06-09 2018-11-27 Airport America, Llc Secure mobile device
US9065812B2 (en) 2009-01-23 2015-06-23 Microsoft Technology Licensing, Llc Protecting transactions
DE102016120767A1 (en) * 2016-10-31 2018-05-03 HTV Cyperion GmbH A computer system arrangement, method for operating a computer system arrangement and method for transmitting data in a computer system arrangement
DE102016120768A1 (en) * 2016-10-31 2018-05-03 HTV Cyperion GmbH Server system arrangement and method for operating a server system arrangement
DE102016120769A1 (en) * 2016-10-31 2018-05-03 HTV Cyperion GmbH Data transmission apparatus, method of transmitting data with a data transmission apparatus and system arrangement

Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6363474B1 (en) * 1999-06-30 2002-03-26 Bull Hn Information Systems Inc. Process switching register replication in a data processing system
US20040024710A1 (en) * 2002-03-07 2004-02-05 Llavanya Fernando Secure input pad partition
US20040097217A1 (en) * 2002-08-06 2004-05-20 Mcclain Fred System and method for providing authentication and authorization utilizing a personal wireless communication device
US20040158742A1 (en) * 2003-02-07 2004-08-12 Broadon Secure and backward-compatible processor and secure software execution thereon
US20050091530A1 (en) * 2003-10-24 2005-04-28 Microsoft Corporation Providing secure input to a system with a high-assurance execution environment
US20050223220A1 (en) * 2004-03-31 2005-10-06 Campbell Randolph L Secure virtual machine monitor to tear down a secure execution environment
US20060047959A1 (en) * 2004-08-25 2006-03-02 Microsoft Corporation System and method for secure computing
US7085935B1 (en) * 2000-03-31 2006-08-01 Intel Corporation Managing a secure environment using a chipset in isolated execution mode
US20060195907A1 (en) * 2004-12-23 2006-08-31 Infineon Technologies Ag Data processing device
US20070192826A1 (en) * 2006-02-14 2007-08-16 Microsoft Corporation I/O-based enforcement of multi-level computer operating modes
US20070192824A1 (en) * 2006-02-14 2007-08-16 Microsoft Corporation Computer hosting multiple secure execution environments
US20080127304A1 (en) * 1995-02-13 2008-05-29 Ginter Karl L Systems and methods for secure transaction management and electronic rights protection
US20080155271A1 (en) * 2006-12-21 2008-06-26 Spansion Llc Solid-state memory-based generation and handling of security authentication tokens

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8473754B2 (en) 2006-02-22 2013-06-25 Virginia Tech Intellectual Properties, Inc. Hardware-facilitated secure software execution environment
GB2440170B8 (en) 2006-07-14 2014-07-16 Vodafone Plc Digital rights management
US9065812B2 (en) 2009-01-23 2015-06-23 Microsoft Technology Licensing, Llc Protecting transactions

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080127304A1 (en) * 1995-02-13 2008-05-29 Ginter Karl L Systems and methods for secure transaction management and electronic rights protection
US6363474B1 (en) * 1999-06-30 2002-03-26 Bull Hn Information Systems Inc. Process switching register replication in a data processing system
US7085935B1 (en) * 2000-03-31 2006-08-01 Intel Corporation Managing a secure environment using a chipset in isolated execution mode
US20040024710A1 (en) * 2002-03-07 2004-02-05 Llavanya Fernando Secure input pad partition
US20040097217A1 (en) * 2002-08-06 2004-05-20 Mcclain Fred System and method for providing authentication and authorization utilizing a personal wireless communication device
US20040158742A1 (en) * 2003-02-07 2004-08-12 Broadon Secure and backward-compatible processor and secure software execution thereon
US20050091530A1 (en) * 2003-10-24 2005-04-28 Microsoft Corporation Providing secure input to a system with a high-assurance execution environment
US20050223220A1 (en) * 2004-03-31 2005-10-06 Campbell Randolph L Secure virtual machine monitor to tear down a secure execution environment
US20060047959A1 (en) * 2004-08-25 2006-03-02 Microsoft Corporation System and method for secure computing
US20060195907A1 (en) * 2004-12-23 2006-08-31 Infineon Technologies Ag Data processing device
US20070192826A1 (en) * 2006-02-14 2007-08-16 Microsoft Corporation I/O-based enforcement of multi-level computer operating modes
US20070192824A1 (en) * 2006-02-14 2007-08-16 Microsoft Corporation Computer hosting multiple secure execution environments
US20080155271A1 (en) * 2006-12-21 2008-06-26 Spansion Llc Solid-state memory-based generation and handling of security authentication tokens

Cited By (61)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1783654A1 (en) * 2004-07-27 2007-05-09 Sony Corporation Information processing device and method, recording medium, and program
US9058604B2 (en) 2010-03-23 2015-06-16 Amazon Technologies, Inc. Converged web-identity and mobile device based shopping
US20110238476A1 (en) * 2010-03-23 2011-09-29 Michael Carr Location-based Coupons and Mobile Devices
US8255284B1 (en) * 2010-03-23 2012-08-28 Amazon Technologies, Inc. User profile and geolocation for efficient transactions
US8341029B1 (en) 2010-03-23 2012-12-25 Amazon Technologies, Inc. User profile and geolocation for efficient transactions
US8521131B1 (en) 2010-03-23 2013-08-27 Amazon Technologies, Inc. Mobile device security
US9681359B2 (en) 2010-03-23 2017-06-13 Amazon Technologies, Inc. Transaction completion based on geolocation arrival
US20110238514A1 (en) * 2010-03-23 2011-09-29 Harsha Ramalingam Transaction Completion Based on Geolocation Arrival
US9609577B1 (en) 2010-03-23 2017-03-28 Amazon Technologies, Inc. Mobile device security
US9760885B1 (en) 2010-03-23 2017-09-12 Amazon Technologies, Inc. Hierarchical device relationships for geolocation-based transactions
US9386507B1 (en) 2010-03-23 2016-07-05 Amazon Technologies, Inc. Mobile device security
US9767474B1 (en) 2010-03-23 2017-09-19 Amazon Technologies, Inc. Transaction tracking and incentives
US9916608B1 (en) 2010-03-23 2018-03-13 Amazon Technologies, Inc. User profile and geolocation for efficient transactions
US9107064B1 (en) 2010-03-23 2015-08-11 Amazon Technologies, Inc. Mobile device security
US9697508B1 (en) 2010-03-23 2017-07-04 Amazon Technologies, Inc. Mobile payments using point-of-sale infrastructure
US9723131B1 (en) 2010-03-23 2017-08-01 Amazon Technologies, Inc. Mobile device security
US9762547B2 (en) 2010-12-22 2017-09-12 May Patents Ltd. System and method for routing-based internet security
US9634995B2 (en) 2010-12-22 2017-04-25 Mat Patents Ltd. System and method for routing-based internet security
US9965768B1 (en) 2011-05-19 2018-05-08 Amazon Technologies, Inc. Location-based mobile advertising
US9342711B2 (en) 2012-02-14 2016-05-17 Janus Technologies, Inc. Systems and methods for controlling access to peripherals of a computer system by software applications
US10061928B2 (en) 2012-02-14 2018-08-28 Janus Technologies, Inc. Security-enhanced computer systems and methods
EP2629234A3 (en) * 2012-02-14 2013-10-02 Janus Technologies, Inc. Security-enhanced computer systems and methods
US8813218B2 (en) 2012-02-14 2014-08-19 Janus Technologies, Inc. Security-enhanced computer systems and methods
US9258307B2 (en) * 2012-03-02 2016-02-09 Alcatel Lucent Decentralized electronic transfer system
US20150033301A1 (en) * 2012-03-02 2015-01-29 Alcatel Lucent Decentralized electronic transfer system
US10108953B2 (en) * 2012-04-13 2018-10-23 Ologn Technologies Ag Apparatuses, methods and systems for computer-based secure transactions
US9742735B2 (en) * 2012-04-13 2017-08-22 Ologn Technologies Ag Secure zone for digital communications
US10027630B2 (en) * 2012-04-13 2018-07-17 Ologn Technologies Ag Secure zone for digital communications
WO2013153441A1 (en) * 2012-04-13 2013-10-17 Ologn Technologies Ag Secure zone for digital communications
US20130276064A1 (en) * 2012-04-13 2013-10-17 Sergey Ignatchenko Secure zone for digital communications
US20130275306A1 (en) * 2012-04-13 2013-10-17 Sergey Ignatchenko Apparatuses, methods and systems for computer-based secure transactions
US9432348B2 (en) 2012-04-20 2016-08-30 Ologn Technologies Ag Secure zone for secure purchases
US9876802B2 (en) * 2012-10-12 2018-01-23 Universitetet I Oslo Multi-mode computer with selector
US20150271184A1 (en) * 2012-10-12 2015-09-24 Universitetet I Oslo Multi-mode computer with selector
WO2014057123A1 (en) * 2012-10-12 2014-04-17 Universitetet I Oslo Multi-mode computer with selector
US9769854B1 (en) 2013-02-07 2017-09-19 Sprint Communications Company L.P. Trusted signaling in 3GPP interfaces in a network function virtualization wireless communication system
US9578664B1 (en) 2013-02-07 2017-02-21 Sprint Communications Company L.P. Trusted signaling in 3GPP interfaces in a network function virtualization wireless communication system
US9232176B2 (en) 2013-03-04 2016-01-05 Janus Technologies, Inc. Method and apparatus for securing computer video and audio subsystems
US20140281560A1 (en) * 2013-03-15 2014-09-18 Ologn Technologies Ag Secure zone on a virtual machine for digital communications
US20140282543A1 (en) * 2013-03-15 2014-09-18 Ologn Technologies Ag Secure zone on a virutal machine for digital communications
US9948640B2 (en) * 2013-08-02 2018-04-17 Ologn Technologies Ag Secure server on a system with virtual machines
US9231921B2 (en) 2013-08-20 2016-01-05 Janus Technologies, Inc. System and architecture for secure computer devices
US9684805B2 (en) 2013-08-20 2017-06-20 Janus Technologies, Inc. Method and apparatus for securing computer interfaces
US9424443B2 (en) 2013-08-20 2016-08-23 Janus Technologies, Inc. Method and apparatus for securing computer mass storage data
US9384150B2 (en) 2013-08-20 2016-07-05 Janus Technologies, Inc. Method and apparatus for performing transparent mass storage backups and snapshots
US9684794B2 (en) 2013-08-20 2017-06-20 Janus Technologies, Inc. System and architecture for secure computer devices
US9215250B2 (en) 2013-08-20 2015-12-15 Janus Technologies, Inc. System and method for remotely managing security and configuration of compute devices
US9076003B2 (en) 2013-08-20 2015-07-07 Janus Technologies, Inc. Method and apparatus for transparently encrypting and decrypting computer interface data
US9699216B2 (en) 2013-08-20 2017-07-04 Janus Technologies, Inc. System and method for remotely managing security and configuration of compute devices
US9836637B2 (en) * 2014-01-15 2017-12-05 Google Llc Finger print state integration with non-application processor functions for power savings in an electronic device
US20150199554A1 (en) * 2014-01-15 2015-07-16 Motorola Mobility Llc Finger Print State Integration with Non-Application Processor Functions for Power Savings in an Electronic Device
US9565168B1 (en) * 2015-05-05 2017-02-07 Sprint Communications Company L.P. System and method of a trusted computing operation mode
US9686240B1 (en) 2015-07-07 2017-06-20 Sprint Communications Company L.P. IPv6 to IPv4 data packet migration in a trusted security zone
US9871768B1 (en) 2015-07-07 2018-01-16 Spring Communications Company L.P. IPv6 to IPv4 data packet migration in a trusted security zone
US9979699B1 (en) 2015-09-08 2018-05-22 Sprint Communications Company L.P. System and method of establishing trusted operability between networks in a network functions virtualization environment
US9749294B1 (en) 2015-09-08 2017-08-29 Sprint Communications Company L.P. System and method of establishing trusted operability between networks in a network functions virtualization environment
US9811686B1 (en) 2015-10-09 2017-11-07 Sprint Communications Company L.P. Support systems interactions with virtual network functions in a trusted security zone
US10044572B1 (en) 2015-11-02 2018-08-07 Sprint Communications Company L.P. Dynamic addition of network function services
US9781016B1 (en) 2015-11-02 2017-10-03 Sprint Communications Company L.P. Dynamic addition of network function services
US10270776B2 (en) 2016-08-25 2019-04-23 Ologn Technologies Ag Secure zone for secure transactions
US10250498B1 (en) 2016-10-03 2019-04-02 Sprint Communications Company L.P. Session aggregator brokering of data stream communication

Also Published As

Publication number Publication date
US9065812B2 (en) 2015-06-23
US9904912B2 (en) 2018-02-27
US20150269537A1 (en) 2015-09-24

Similar Documents

Publication Publication Date Title
US8938793B2 (en) System and method for secure management of transactions
KR101253392B1 (en) Performing secure electronic transactions
US9734496B2 (en) Trusted remote attestation agent (TRAA)
KR101878149B1 (en) Device, system, and method of secure entry and handling of passwords
US7350230B2 (en) Wireless security module
KR101596279B1 (en) Method and device for conducting trusted remote payment transactions
US6662020B1 (en) Arrangement for effecting secure transactions in a communication device
US20140052620A1 (en) Wireless reader and payment transaction terminal functionality within a portable device
US20110016047A1 (en) Financial transaction system, automated teller machine (atm), and method for operating an atm
US7606560B2 (en) Authentication services using mobile device
US8108317B2 (en) System and method for restricting access to a terminal
US9883387B2 (en) Authentication using application authentication element
US9094213B2 (en) Method and system for effecting secure communication over a network
US10120993B2 (en) Secure identity binding (SIB)
US20110185181A1 (en) Network authentication method and device for implementing the same
US20060265340A1 (en) Transaction authentication by a token, contingent on personal presence
US20110113245A1 (en) One time pin generation
US20130060618A1 (en) Method and System for Electronic Wallet Access
CN101084643A (en) Authentication device and/or method
US7357329B2 (en) IC card, terminal device, and data communication method
KR20170051545A (en) Authentication with secondary approver
JP2000231661A (en) Individual device, terminal, server, and method for establishing reliable connection between user and terminal
US20130173925A1 (en) Systems and Methods for Fingerprint-Based Operations
US20100180120A1 (en) Information protection device
US8650614B2 (en) Interactive phishing detection (IPD)

Legal Events

Date Code Title Description
AS Assignment

Owner name: MICROSOFT CORPORATION, WASHINGTON

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:STEEVES, DAVID J.;CAMERON, KIM;CARPENTER, TODD L.;AND OTHERS;SIGNING DATES FROM 20090306 TO 20090609;REEL/FRAME:022950/0823

AS Assignment

Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTON

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034564/0001

Effective date: 20141014

MAFP

Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 4